$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: FamC9BO01eobqdtikiI1ouxqG7S3xzM8Rs2dabJdDx4= Subject key identifier: 75:1C:7A:22:36:9C:7E:FB:5F:92:8B:4E:E4:97:3B:B0:DD:11:4D:34 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 08C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 08A2 Signing time: Tue 16 Sep 2025 20:46:54 +0000 Manifest this update: Tue 16 Sep 2025 20:46:53 +0000 Manifest next update: Tue 23 Sep 2025 20:46:53 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: hqLRiokI2cGOQiUZWyv9Jp+gQlJ4w1NUIB+PtsAxXEI=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: Ug8T2jAnxBEFXcI9OyfxIdrB1/QKIOy0uEZRs/AiI9w=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: mTee11vC2WHUjxpYpzX5Cx2s5T+zTjrHiz6j8S4XOXs=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: tqRni/vRCybcm/Qe5j/RJ1ji818pRaDVNQ0/GTu1HOQ=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: /rsO1xFmt4Wd2M5OBk3RGt2QvbZOZFnfqTaQeAfy5hE=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RJDI3i7hM1nBIPS/73ED0LFQix8Jwqczz+z+Slz7wW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Sep 16 20:46:53 2025 GMT Not After : Sep 23 20:46:53 2025 GMT Subject: CN=68c9ccbd-5740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:b9:34:01:b3:6c:0a:8b:62:5f:be:b7:7a: ac:fd:f2:6b:63:82:2d:fb:66:d5:35:3e:a7:9d:42: 93:a9:c8:eb:a6:03:84:3b:5a:a8:d0:61:50:0c:e9: da:1b:67:f8:25:10:10:66:72:d6:20:61:27:f9:8a: bb:7a:90:74:65:e1:ba:fd:27:e6:a7:24:ab:46:b0: 71:b4:36:a7:bc:08:14:11:c8:52:23:c1:60:e4:03: cc:03:1a:a0:07:58:80:b7:dd:4d:67:51:60:9c:42: 2c:61:75:ec:0b:68:60:40:46:90:74:d8:81:d1:67: 7c:96:c8:a6:d6:c6:c4:53:7d:44:8b:8a:2d:e4:6b: 4b:bd:33:30:f1:68:e3:50:09:3a:7f:33:e0:e6:a2: c5:4b:34:f3:ed:3b:e3:be:f2:a2:63:15:7e:a1:56: 7c:b5:fa:64:17:b9:4e:9e:26:f5:ec:a4:2c:69:10: 83:b9:26:d6:24:aa:be:d9:af:d0:40:53:5d:be:22: c8:cb:ff:03:64:a6:49:3b:dc:2a:e5:d7:5f:12:93: ac:ea:3c:5a:63:1c:d4:03:8c:d8:34:c2:e8:3e:16: e6:5f:f7:33:34:fd:3b:ca:bf:e7:3e:d9:74:ae:d1: 9d:d1:15:a6:ab:99:e3:72:26:14:c4:b9:38:5c:bf: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1C:7A:22:36:9C:7E:FB:5F:92:8B:4E:E4:97:3B:B0:DD:11:4D:34 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c8:11:88:7d:7f:a8:9f:c9:d9:bb:39:26:b3:a6:e0:3b:ce: 54:d8:0c:a7:70:0e:4f:e5:5f:5f:9e:ef:08:b5:f0:8f:94:38: 67:a9:f8:c5:fc:aa:94:fe:b6:76:da:6e:95:b8:43:ad:21:ee: 04:2e:ee:0a:d2:a1:1b:20:28:8c:19:b8:77:a1:4a:34:40:72: 91:2e:5e:26:f8:d5:b7:84:b6:00:19:56:b6:4b:b3:94:6e:ba: a2:ef:d1:56:b0:0c:c4:b5:f8:e7:69:d1:2f:b4:e9:95:e6:e5: 7b:f2:ba:5b:aa:be:4a:3d:47:1e:dc:69:2e:5e:f2:cf:e8:1c: b6:8e:62:8f:73:28:66:5e:84:c7:d6:07:12:12:a3:9f:a8:e3: c5:fa:e1:ee:40:f7:f2:24:01:8e:cb:0c:84:dd:98:44:4c:43: 8a:ea:19:f3:2b:45:7d:4e:dd:53:b7:55:13:96:66:62:62:4d: 96:83:c7:8a:6f:f9:ed:69:db:cb:85:b3:80:3d:e1:0f:36:d7: fb:74:2b:d3:30:86:1e:43:0d:c0:5f:45:92:21:cb:a3:f4:cd: 23:d4:bd:84:7e:0b:9d:1e:c2:a4:2e:48:ae:74:44:1f:bc:46: c8:c4:e4:9b:fa:c1:95:19:57:64:74:e9:9f:6a:50:34:2f:18: 47:74:1f:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUwOTE2MjA0NjUzWhcNMjUwOTIzMjA0NjUzWjAYMRYwFAYD VQQDEw02OGM5Y2NiZC01NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D65NAGzbAqLYl++t3qs/fJrY4It+2bVNT6nnUKTqcjrpgOEO1qo0GFQDOna G2f4JRAQZnLWIGEn+Yq7epB0ZeG6/SfmpySrRrBxtDanvAgUEchSI8Fg5APMAxqg B1iAt91NZ1FgnEIsYXXsC2hgQEaQdNiB0Wd8lsim1sbEU31Ei4ot5GtLvTMw8Wjj UAk6fzPg5qLFSzTz7TvjvvKiYxV+oVZ8tfpkF7lOnib17KQsaRCDuSbWJKq+2a/Q QFNdviLIy/8DZKZJO9wq5ddfEpOs6jxaYxzUA4zYNMLoPhbmX/czNP07yr/nPtl0 rtGd0RWmq5njciYUxLk4XL+RhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUceiI2 nH77X5KLTuSXO7DdEU00MB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGyBGIfX+on8nZuzkms6bgO85U2AyncA5P5V9fnu8ItfCPlDhnqfjF /KqU/rZ22m6VuEOtIe4ELu4K0qEbICiMGbh3oUo0QHKRLl4m+NW3hLYAGVa2S7OU brqi79FWsAzEtfjnadEvtOmV5uV78rpbqr5KPUce3GkuXvLP6By2jmKPcyhmXoTH 1gcSEqOfqOPF+uHuQPfyJAGOywyE3ZhETEOK6hnzK0V9Tt1Tt1UTlmZiYk2Wg8eK b/ntadvLhbOAPeEPNtf7dCvTMIYeQw3AX0WSIcuj9M0j1L2EfgudHsKkLkiudEQf vEbIxOSb+sGVGVdkdOmfalA0LxhHdB+M -----END CERTIFICATE-----Generated at Thu Sep 18 01:07:18 2025 by rpki-client